PRIVACY POLICY

Information on the collection of personal data and contact details of the data controller

We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data is any data with which you can be personally identified.

As a rule, it is possible to use our website without providing personal data.

Insofar as personal data is collected during a visit to our website, we process it exclusively in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679; DSGVO) and the Federal Data Protection Act of 30 July 2017 (BDSG-neu), as well as the Telemedia Act (TMG). The processing of personal data takes place exclusively in accordance with this data protection declaration.

This data protection declaration applies to the use of the website at www. hupfer-pop-up-expo.com. For linked content from other providers, the data protection declaration stored on the linked website is authoritative.

We would like to point out that security gaps can occur in the course of data transmission via the Internet, which cannot be prevented even by the technical design of this website. Complete protection of personal data is not possible when using the Internet.

Person responsible for data processing

on this website within the meaning of the General Data Protection Regulation (GDPR):

Hupfer Metallwerke GmbH & Co. KG, Dieselstr. 20, 48653 Coesfeld, Deutschland, Tel.: +49 2541 805-0, Fax: +49 2541 805-111, E-Mail: info@hupfer.com

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

Data Protection Officer

The responsible person has appointed a data protection officer for this website, who can be contacted as follows:

Mr Dipl.-Inform. Olaf Tenti
GDI Gesellschaft für Datenschutz und Informationssicherheit mbH
Körnerstraße 45, 58095 Hagen (NRW)
Phone: +49 (0)2331/356832-0
E-Mail: datenschutz@gdi-mbh.eu
Internet: www.gdi-mbh.eu

Data collection when visiting our website

Hosting

Our website is operated on servers of ITM design GmbH, Hauptstraße 43, 48712 Gescher, Tel.: +49 (2542) 917 918 30

During the mere informational use of our website, i.e. if you do not register or otherwise transmit information to us, we only collect data that your browser transmits to our server (so-called "server log files"). When you call up our website, we collect the following data, which is technically necessary for us to display the website to you:

• Our visited website
• Date and time at the time of access
• Amount of data sent in bytes
• Source/reference from which you reached the page
• Browser used
• Operating system used
• IP address used in anonymised form

Data stored by the hoster is automatically deleted after 7 days.

The processing is carried out in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not passed on or used in any other way. However, we reserve the right to check the server log files retrospectively if there are concrete indications of illegal use.

Cookies

In addition to the previously mentioned data, cookies are used on your computer when you use and visit our website.

When you visit our website for the first time, you will be asked whether you agree to the use of cookies and, if so, which categories you agree to.

Cookies are small text files that are stored by your browser on your terminal device to save certain information. Furthermore, these cookies are used to make the use of our offer more pleasant and comfortable for you or for analytical purposes.

Most of the cookies we use are so-called "session cookies". They are used to make the services of our website technically available to you. After your visit, these cookies are automatically deleted by your browser.

Other cookies remain on your computer and cause us to recognise your terminal device on your next visit (so-called persistent or permanent cookies).

The next time you visit our website with the same terminal device, the information stored in cookies is read either by our website ("first party cookie") or by another website to which the cookie belongs ("third party cookie").

These cookies are automatically deleted from your system after a preset period of time, which differs depending on the cookie.

Through the stored and returned information, the respective website recognises that you have already called up and visited it with the browser of your end device.

We use this information to optimally design and display the website according to your preferences. Only the cookie itself is identified on your terminal device.

Any further storage of personal data will only take place with your express consent or if this is absolutely necessary in order to be able to use the service offered and accessed by you accordingly.

This website uses the following types of cookies, the scope and functionality of which are explained below:

- Essential cookies: Essential cookies ensure functions without which you cannot use our websites as intended. These cookies are used exclusively by us and serve, for example, to ensure that you, as a registered user, always remain logged in when accessing various sub-pages of our website and thus do not have to re-enter your login data each time you call up a new page. The legal basis for their use is our legitimate interest within the meaning of Art. 6 Para. 1 lit. f) DSGVO.

- Functional cookies: Enable our website to save information that has already been provided and to offer you improved functions based on this information. The legal basis for the use of these cookies is your consent pursuant to Art. 6 para. 1 lit. a) DSGVO.

- Marketing or tracking cookies: These cookies are used to collect information about the websites visited by the user, to create targeted and more effective advertising for the user and to enable us to identify the interests of website visitors in order to make our website more interesting in the future.

Marketing and/or tracking cookies are only set after your active consent.

The legal basis for data processing in this case is Art. 6 para. 1 p. 1 lit. a DSGVO.

Opt-out for marketing cookies

You can also manage cookies used for online advertising through tools developed in many countries as part of self-regulatory programmes, such as the US-based https://www.aboutads.info/choices/ or the EU-based https://www.youronlinechoices.com/de/praferenzmanagement/.

You can revoke this consent to cookies at any time with effect for the future here.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, e.g. third-party cookies (cookies that are set by a third party, i.e. not by the actual website you are currently visiting), exclude the acceptance of cookies for certain cases or generally, and activate the automatic deletion of cookies when closing the browser. You can delete stored cookies at any time using your web browser.

You have the option to generally deactivate cookies in your browser at any time.

However, the functionality of this website may be limited if cookies are deactivated.

Delete cookies

Cookies are stored on your terminal device until you delete these cookies, which is possible at any time. Furthermore, expired cookies are automatically deleted by your browser if you have set up your browser accordingly. Expired cookies are no longer sent to our servers by your browser and can therefore no longer be used by us.

Here you will find information on how to delete cookies from your browser and manage cookie settings for the most popular browsers:

Desktop-PC / Laptop

• Microsoft Edge
• Mozilla Firefox
• Apple Safari
• Google Chrome

Mobile devices

• Google Chrome (Android)
• Google Chrome (iOS)
• Apple Safari (iOS)
• Samsung Internet (Android)
• Mozilla Firefox (Android)

If you have not made or do not make any deviating settings, cookies that enable or are intended to ensure the required technical functions remain on your end device until you close the browser; other cookies may remain on your end device for longer (maximum 6 months).

To safeguard your privacy, you should regularly check the cookies on your respective end device as well as your browsing history and delete them on your own.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties (end-to-end encryption). The protocols authenticate the communication partner and ensure the integrity of the transported data.

Contact options

On our website, you have the option of contacting us by e-mail. In this context, your personal data will be stored and processed for the purpose of communication. The data collected for this purpose (name, address, e-mail address) will not be passed on to third parties.

The data is not merged with other data collected on this website.

The data may be stored as part of the customer relations management (CRM) if you are already a customer of our company.

The processing of this data is based on Art. 6 (1) lit. b DSGVO, insofar as your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the enquiries addressed to us (Art. 6 (1) (f) DSGVO).

The data you provide will remain with us until you request us to delete it, revoke your consent to store it or the purpose for storing the data no longer applies (e.g. after processing your enquiry has been completed). Mandatory legal provisions - in particular retention periods - remain unaffected.

Collection and use of personal data when registering for the event

You can register for events on our website.

Registration takes place via a double-opt-in procedure.

You will receive an e-mail at the address you provided in which you can confirm your registration via a link contained therein.

If confirmation is not received within 24 hours, the registration will be automatically deleted from our database.

By registering to participate in an event, the user of this website (hereinafter referred to as "user") agrees that we may use the personal data provided by the user for the sole purpose of organising the event. This primarily includes the storage of the business address so that we can contact the user in the event of changes to the respective event procedures, dates or content.

The following data is collected (partly voluntary):

• Salutation
• First name
• Surname
• E-mail address
• Company name
• Street
• City
• Postcode
• Country
• Telephone
• Fax

The deletion of the data is possible at any time by sending us a short message by e-mail info@hupfer.de or post. Participation is then no longer possible.

The legal basis for data processing is Art. 6 para. 1 p. 1 lit. b DSGVO.

To prevent unauthorised access by third parties to your personal data, in particular financial data, the ordering process is encrypted using TLS technology.

Newsletter

On our website you have the option of registering for a newsletter, which is sent by e-mail. The newsletter is sent to your e-mail address on the basis of your personal registration with subsequent confirmation (double opt-in), with which you consent to the newsletter being sent.

The legal basis for this results from Art. 6 para. 1 p. 1 lit. a DSGVO.

For sending the newsletter, we store your e-mail address [as well as your first name and surname if you have voluntarily submitted them to us,] [and the lists you have subscribed to]. [The data will not be passed on to third parties. / The data will be passed on to our service provider [NAME] for sending the newsletter].

Our newsletter system has a function that allows us to track at what time which recipients have opened the newsletter. This data is stored and used to evaluate the reach of individual campaigns.

Revocation of consent: You can revoke the use of your data at any time with effect for the future. You will find an option to unsubscribe from the newsletter at the end of each newsletter e-mail.

Rights of the data subject

You are entitled to the rights listed below. You can assert these against us.

To assert your rights, please use the above-mentioned data or contact us by e-mail at: info@hupfer.de.

Information:

In accordance with Art. 15 DSGVO, you have the right to request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;

Correction:

Pursuant to Art. 16 DSGVO, you have the right to request the correction of inaccurate or incomplete personal data stored by us without delay;

Deletion:

In accordance with Art. 17 DSGVO, you have the right to request the deletion of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims;

Restriction of processing:

In accordance with Art. 18 DSGVO, you have the right to request the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer require the data, but you need it for the assertion, exercise or defence of legal claims, or you have objected to the processing in accordance with Art. 21 DSGVO;

Data portability:

In accordance with Art. 20 DSGVO, you have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another controller;

Withdrawal of your consent:

In accordance with Art. 7 (3) DSGVO, you have the right to revoke your consent at any time. This has the consequence that we may no longer continue the data processing based on this consent for the future.

Please address your revocation to the above data or by e-mail to: info@hupfer.de

Right of objection

You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data relating to you which is carried out on the basis of Art. 6 para. 1. p. 1 lit. e) or f) DSGVO; this also applies to profiling based on these provisions.

The controller shall no longer process the personal data concerning you unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims.

If the personal data concerning you is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling, insofar as it is related to such direct marketing.

If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

You have the possibility, in connection with the use of information society services, notwithstanding Directive 2002/58/EC, to exercise your right to object by means of automated procedures using technical specifications.

Automated decision in individual cases including profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision is necessary for the conclusion or performance of a contract between you and the controller, is permitted by Union or Member State law to which the controller is subject and that law contains adequate measures to safeguard your rights and freedoms and your legitimate interests, or is made with your explicit consent.

However, these decisions must not be based on special categories of personal data pursuant to Art. 9(1) DSGVO, unless Art. 9(2)(a) or (g) DSGVO applies and appropriate measures have been taken to protect the rights and freedoms and your legitimate interests.

Complaint to a supervisory authority:

In accordance with Art. 77 DSGVO, you have the right to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters for this purpose.

Status of the privacy policy

The constant development of the Internet makes it necessary to make adjustments to our privacy policy from time to time. We reserve the right to make corresponding changes at any time.

Status: May 2022